Development InfoStructure

Lead technical operation and engineering of cybersecurity tools ensuring high availability and implement Zero Trust solutions. | Bachelor's degree, 7+ years experience in enterprise security infrastructure, CISSP certification, and ability to obtain security clearance. | Company Overview Development InfoStructure LLC., (Devis) is a leading provider of innovative software development, management, and consulting services, specializing in cutting-edge technologies such as DevSecOps, AI, and Machine Learning. With over 30 years of experience, we have established ourselves as a trusted partner for government agencies, delivering tailored, mission-critical solutions that drive digital transformation and operational excellence. Our client-centric approach, coupled with our deep domain expertise and technical prowess, enables us to forge enduring relationships and consistently deliver high-impact, adaptive solutions that resonate with the unique needs of the public sector. Job Overview The Security Architecture / Engineering Lead serves as the technical leader for the enterprise cybersecurity tool stack under the Information Security Program Support Services (ISPSS) effort supporting the NIH Office of the Director, Office of Information Technology (OD OIT), responsible for operating and engineering security tools at a minimum 95% monthly operational availability and advancing the Zero Trust architecture across on-premises and cloud environments. This role drives execution across SIEM, EDR, next-generation firewall, cloud security, DLP, PAM, and IDS/IPS operations, security engineering, and Zero Trust implementation under OMB M-22-09 in close coordination with NIH/OD OIT leadership. This is a full-time position with work performed primarily offsite, though travel to NIH/OD facilities in the Bethesda, MD area will be required on an as-needed basis. Core hours are Monday-Friday, 7:00 AM - 6:00 PM EST, and after-hours support for emergency incidents will be required as needed by NIH/OD. Position is contingent upon award and client approval. Primary Duties Operate & Engineer Security Infrastructure Operate, manage, deploy, and maintain enterprise security tools (SIEM, EDR, NGFW, cloud security, DLP, PAM, IDS/IPS) and supporting infrastructure Maintain a minimum 95% monthly operational availability for contractor-managed cybersecurity systems and services Configure, tune, patch, and troubleshoot security devices; update sensors and signatures in support of monitoring and incident response Identify infrastructure gaps and recommend improvements to visibility and security Lead Zero Trust Architecture Design, document, and implement Zero Trust security solutions across on-premises and cloud environments per OMB M-22-09 Produce Baseline Zero Trust Security Architecture Reference Documents and the Privileged Access SOP Provide enhanced incident response capabilities as part of Zero Trust architectures Ensure Reliability & Documentation Provide contingency planning support for emergency restoration and disaster recovery of security systems Perform and verify backups; manage the Security Artifact / ATO Tracking System Maintain configuration management data, maintenance logs, and architecture documentation Deliver System Availability & Uptime Reports and gaps-remediation reporting Required Qualifications Education & Experience Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related field (or equivalent experience) Minimum 7 years engineering and administering enterprise security infrastructure Demonstrated experience designing and implementing Zero Trust architectures in hybrid environments Required Certifications CISSP (or comparable senior security certification) Relevant OEM/platform certifications for the deployed toolset are a plus Technical Skills Hands-on experience with enterprise SIEM, EDR, NGFW, cloud security, DLP, PAM, and IDS/IPS technologies Cloud and on-premises security engineering; familiarity with WAFs and network security Understanding of OMB M-22-09 and federal Zero Trust requirements Leadership Capabilities Ability to brief technical and executive audiences on security-engineering decisions Strong documentation and cross-team coordination skills Preferred Qualifications Experience supporting NIH/HHS or federal hybrid (on-prem + cloud) environments Experience with NIH STRIDES or comparable cloud programs Automation/scripting for security operations Clearance Must be able to obtain and maintain the NIH/OD/OIT required clearance level and complete all suitability/onboarding requirements Salary Range $110,000 - $130,000 Devis is an AA/EOE/M/F/Disabled/VET Employer committed to providing equal employment opportunity without regard to an individual’s race, color, religion, age, gender, sexual orientation, veteran status, national origin or disability.

Lead 24x7x365 security monitoring, incident triage, and response including digital forensics and threat hunting for NIH environment. | Bachelor's degree and 7+ years in security operations and SOC leadership with relevant certifications required. | Company Overview Development InfoStructure LLC., (Devis) is a leading provider of innovative software development, management, and consulting services, specializing in cutting-edge technologies such as DevSecOps, AI, and Machine Learning. With over 30 years of experience, we have established ourselves as a trusted partner for government agencies, delivering tailored, mission-critical solutions that drive digital transformation and operational excellence. Our client-centric approach, coupled with our deep domain expertise and technical prowess, enables us to forge enduring relationships and consistently deliver high-impact, adaptive solutions that resonate with the unique needs of the public sector. Job Overview The SOC / Incident Response Lead serves as the operational leader for 24x7x365 security monitoring and incident response under the Information Security Program Support Services (ISPSS) effort supporting the NIH Office of the Director, Office of Information Technology (OD OIT), responsible for leading Tier 1 detection and triage and Tier 2/3 forensics, threat hunting, and cyber threat intelligence across the NIH/OD-OIT managed environment. This role drives execution across incident detection, triage, investigation of suspected intrusions within 30 minutes, containment and recovery, digital forensics (NIST SP 800-86), malware analysis, and incident reporting in close coordination with NIH/OD OIT leadership and enterprise cybersecurity organizations. This is a full-time position with work performed primarily offsite, though travel to NIH/OD facilities in the Bethesda, MD area will be required on an as-needed basis. Core hours are Monday-Friday, 7:00 AM - 6:00 PM EST, and after-hours support for emergency incidents will be required as needed by NIH/OD. Position is contingent upon award and client approval. Primary Duties Lead 24x7 Security Operations Direct real-time, 24x7x365 security log collection, monitoring, alerting, and event analysis across the OIT-managed environment Perform incident triage on all incidents to determine scope, urgency, and operational impact Investigate suspected intrusions and suspicious activity within 30 minutes of detection Ensure accurate, consistent incident categorization and ticketing Direct Incident Response & Forensics Lead detection, triage, analysis, containment, eradication, recovery, and post-incident reporting Oversee Tier 2/3 digital forensics, evidence preservation, and chain of custody compliant with NIST SP 800-86 Conduct malware analysis, reverse engineering, and analysis of suspicious websites, emails, and payloads Deliver Security Incident Tickets/Reports within 1 hour of detection and Incident Response After Action Reports Advance Threat Hunting & Intelligence Lead Advanced Persistent Threat (APT) hunting across the managed environment Operate an active Cyber Threat Intelligence (CTI) program to collect, correlate, and disseminate relevant intelligence and IOCs Support collaboration with OCIO threat intelligence / Fusion Center activities Strengthen the SOC Provide engineering support to the SOC and Incident Response Team and ensure proper configuration of SOC-managed tools and agents Lead annual incident response tabletop exercises and implement lessons learned Produce the Monthly Forensic Activity Summary and related metrics Required Qualifications Education & Experience Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent experience) Minimum 7 years in security operations / incident response, including SOC team leadership Demonstrated experience with digital forensics, malware analysis, and threat hunting in enterprise environments Required Certifications One or more incident response/forensics certifications: GCIH, GCIA, or GCFA (or comparable) CISSP strongly preferred Technical Skills Hands-on expertise with SIEM, EDR, and IDS/IPS platforms and security log analysis Forensic tooling and evidence handling consistent with NIST SP 800-86 and Federal Rules of Evidence Familiarity with US-CERT incident notification guidelines and federal reporting timelines Leadership Capabilities Calm, decisive leadership during active incidents and crisis coordination Strong written reporting and clear escalation communication Preferred Qualifications Experience supporting NIH/HHS or other federal SOC operations Cloud monitoring/IR experience (e.g., Azure, AWS) Experience standing up or maturing CTI programs Clearance Must be able to obtain and maintain the NIH/OD/OIT required clearance level and complete all suitability/onboarding requirements Salary Range $110,000 - $130,000 Devis is an AA/EOE/M/F/Disabled/VET Employer committed to providing equal employment opportunity without regard to an individual’s race, color, religion, age, gender, sexual orientation, veteran status, national origin or disability.